CVS commit: pkgsrc/www

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Jan 14 17:07:12 UTC 2015

Modified Files:
        pkgsrc/www/py-django: Makefile distinfo
        pkgsrc/www/py-django14: Makefile distinfo

Log Message:
Fixed securify issues:
* WSGI header spoofing via underscore/dash conflation
* Mitigated possible XSS attack via user-supplied redirect URLs
* Denial-of-service attack against django.views.static.serve
* Database denial-of-service with ModelMultipleChoiceField


To generate a diff of this commit:
cvs rdiff -u -r1.56 -r1.57 pkgsrc/www/py-django/Makefile
cvs rdiff -u -r1.39 -r1.40 pkgsrc/www/py-django/distinfo
cvs rdiff -u -r1.8 -r1.9 pkgsrc/www/py-django14/Makefile
cvs rdiff -u -r1.4 -r1.5 pkgsrc/www/py-django14/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.